Skip to content

Database

Per-type reference · From docs/INVENTORY_CATALOG.md on GitHub

RDS_INSTANCE

Catalog entries that classify native resources as this type:

  • AWS ARN: rds:db

  • Providers: AWS

  • Metadata keys: cluster (null), deletion_protection (bool), endpoint (str), engine (str), engine_version (str), instance_class (str), kms_key_id (null | str), multi_az (bool), publicly_accessible (bool), security_groups (list), storage_encrypted (bool), subnet_id (str), vpc_id (null)
  • Carries aliases: yes
  • Edges out:
    ATTACHED_TO / PROTECTED_BY_SG → SECURITY_GROUP
  • Edges in:
    CONTAINS / SUBNET_CONTAINS_INSTANCE ← SUBNET
    LOAD_BALANCER_TARGET / SERVES_TRAFFIC_TO ← DATABASE_PROXY
    REFERENCES ← SNAPSHOT

AURORA_CLUSTER

Catalog entries that classify native resources as this type:

  • AWS ARN: rds:cluster
  • AWS CloudFormation (Cloud Control): AWS::DocDB::DBCluster, AWS::Neptune::DBCluster

  • GCP Cloud Asset Inventory: alloydb.googleapis.com/Cluster

  • Providers: AWS

  • Metadata keys: deletion_protection (bool), endpoint (str), engine (str), engine_version (str), kind (str), kms_key_id (str), members (list), security_groups (list), service (str), status (str), storage_encrypted (bool), writer (str)
  • Carries aliases: yes
  • Declared relations: CONTAINS, REFERENCES / ENCRYPTED_BY_KMS, REFERENCES / REPLICATES_TO ←
  • Edges out:
    CONTAINS → AURORA_CLUSTER
    REFERENCES / REPLICATES_TO → AURORA_CLUSTER
  • Edges in:
    CONTAINS ← AURORA_CLUSTER
    REFERENCES ← SNAPSHOT
    REFERENCES / REPLICATES_TO ← AURORA_CLUSTER

AZURE_SQL

Catalog entries that classify native resources as this type:

  • Azure ARM: microsoft.dbformariadb/servers, microsoft.dbformysql/flexibleservers, microsoft.dbformysql/servers, microsoft.dbforpostgresql/flexibleservers, microsoft.dbforpostgresql/servergroupsv2, microsoft.dbforpostgresql/servers, microsoft.sql/managedinstances, microsoft.sql/servers, microsoft.sql/servers/databases, microsoft.sql/servers/elasticpools

  • Providers: AZURE

  • Can be internet-exposed: yes (is_internet_exposed observed true)
  • Metadata keys: allow_azure_services (bool), collected_via (str), edition (str), entra_only_auth (null), firewall_rules (list), fqdn (str), kind (null), minimal_tls_version (null), parent_resource (str), properties (object), public_network_access (str), resource_group (str), resource_type (str), role (str), server_id (str), server_name (str), sku (null | str), status (str), version (null)
  • Carries aliases: yes
  • Declared relations: CONTAINS ←
  • Edges out:
    CONTAINS → AZURE_SQL
  • Edges in:
    CONTAINS ← AZURE_SQL, RESOURCE_GROUP

CLOUD_SQL

Catalog entries that classify native resources as this type:

  • GCP Cloud Asset Inventory: alloydb.googleapis.com/Instance, spanner.googleapis.com/Instance, sqladmin.googleapis.com/Instance

  • Providers: GCP

  • Metadata keys: authorized_networks (list), backups_enabled (bool), create_time (null), database_version (str), description (null), folders (list), gcp_asset_type (str), location (str), network_tags (list), organization (str), parent_asset_type (null), parent_full_resource_name (str), project (str), project_id (str), project_number (str), public_ip_enabled (bool), public_ips (list), state (null)
  • Carries aliases: yes
  • Declared relations: ATTACHED_TO
  • Edges out:
    ATTACHED_TO → VPC
  • Edges in:
    CONTAINS ← CLOUD_ACCOUNT
    REFERENCES / DEPENDS_ON ← CONTAINER_SERVICE

DYNAMODB_TABLE

Catalog entries that classify native resources as this type:

  • AWS ARN: dynamodb:table
  • AWS CloudFormation (Cloud Control): AWS::Cassandra::Keyspace
  • Azure ARM: microsoft.documentdb/databaseaccounts

  • GCP Cloud Asset Inventory: bigtableadmin.googleapis.com/Instance, firestore.googleapis.com/Database

  • Providers: AWS

  • Metadata keys: billing_mode (str), deletion_protection (bool), encryption (str), external_accounts (list), global_table_version (null | str), indexes (list), item_count (int), kinesis_destinations (list), kms_key_id (null | str), pitr_enabled (bool), pitr_recovery_days (int | null), policy_principals (list), public_policy (bool), replica_regions (list), size_bytes (int), sse_type (null | str), status (str), stream_arn (null | str), stream_enabled (bool), stream_view_type (null | str), table_class (null)
  • Carries aliases: yes
  • Declared relations: GRANTS_ACCESS / CROSS_ACCOUNT_TRUST ←, REFERENCES / ENCRYPTED_BY_KMS, REFERENCES / REPLICATES_TO, REFERENCES / STREAMS_TO
  • Edges out:
    INVOKES → LAMBDA_FUNCTION
    REFERENCES / BACKUP_TO → BACKUP_VAULT
    REFERENCES / ENCRYPTED_BY_KMS → KMS_KEY
    REFERENCES / REPLICATES_TO → DYNAMODB_TABLE
    REFERENCES / STREAMS_TO → DATA_STREAM
  • Edges in:
    GRANTS_ACCESS / CROSS_ACCOUNT_TRUST ← CLOUD_ACCOUNT
    MANAGES / BACKUP_TO ← BACKUP_PLAN
    REFERENCES / REPLICATES_TO ← DYNAMODB_TABLE